Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File:                     kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier:          kIibkNGrjThcuAD9SsdMWWoScbIQyzNy92jtUs7sdi4=
Subject key identifier:   71:16:F8:34:9D:EC:30:DE:6C:6D:B8:B7:E2:FB:5A:FD:EB:73:F4:5E
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer:       /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial:       10B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number:          10B4
Signing time:             Mon 22 Jun 2026 17:18:13 +0000
Manifest this update:     Mon 22 Jun 2026 17:18:13 +0000
Manifest next update:     Mon 29 Jun 2026 17:18:13 +0000
Files and hashes:         1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: +wqB1YB8nDZcrjGiZ3louyZrLoAkCvjyjqlP2VqqQl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
                          rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4276 (0x10b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
        Validity
            Not Before: Jun 22 17:18:13 2026 GMT
            Not After : Jun 29 17:18:13 2026 GMT
        Subject: CN=6a396e55-d29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:f7:52:19:83:e0:98:6e:f5:51:e4:11:19:
                    f8:d1:55:dc:42:66:84:76:28:2a:2f:cd:21:f0:b4:
                    fd:0a:19:fd:6e:48:c7:8a:87:42:a2:b1:b0:25:7d:
                    c0:bd:40:d5:ca:68:91:e0:dc:49:33:fd:af:c9:87:
                    40:80:63:f0:b7:36:c0:6d:49:0d:a9:9b:22:fa:1b:
                    81:4c:a6:38:d6:9e:5b:9b:8c:db:a0:06:8a:4f:ad:
                    c3:ce:96:c2:fb:8c:11:a2:e1:3a:ef:19:af:88:cd:
                    15:f9:21:d1:39:6a:0c:e3:67:cc:e1:44:16:01:36:
                    c6:9f:fd:48:1d:43:98:5a:e0:74:84:63:40:61:bd:
                    89:86:a0:28:4b:06:28:56:00:01:eb:dc:8b:0b:30:
                    78:d4:47:3c:90:a9:32:96:79:29:5b:6f:d7:c8:74:
                    9f:d3:e3:49:98:34:02:aa:01:9c:04:cd:80:17:63:
                    11:2b:54:65:95:e9:a1:aa:08:ff:f4:73:53:1f:6b:
                    c3:60:2e:0f:42:50:16:3a:ff:7b:c0:32:94:64:09:
                    53:fd:b3:56:f3:f1:83:4e:e4:de:44:ec:0e:41:bc:
                    2f:c9:92:2f:64:99:b0:57:69:92:c6:d8:8d:47:4d:
                    fb:e5:7e:26:97:90:7b:bc:76:39:99:18:ad:ab:e7:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:F8:34:9D:EC:30:DE:6C:6D:B8:B7:E2:FB:5A:FD:EB:73:F4:5E
            X509v3 Authority Key Identifier:
                keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:32:e3:a4:c2:06:fd:17:f1:f6:54:e4:3b:b9:cf:d4:1c:7c:
         e7:61:13:d4:af:93:11:b6:81:ef:fd:e5:01:de:c2:bb:d7:e8:
         51:ca:f7:0e:02:d0:36:f3:1e:ae:86:97:ee:0a:16:69:d0:7b:
         47:67:b3:9a:0c:36:c3:e0:d8:84:76:54:64:16:2b:11:78:b7:
         75:f1:a2:ae:39:f3:cd:98:68:39:7f:00:40:f2:f0:14:dc:d3:
         f0:e8:ea:26:c4:71:30:33:89:12:f5:04:a8:c0:6f:a5:0c:d5:
         d8:2a:df:0f:3b:4e:90:cf:5d:27:75:89:68:71:a8:da:c2:e5:
         af:35:d7:98:69:88:27:8c:3b:58:1e:81:3c:b5:ec:70:62:03:
         f4:1b:bc:5c:55:11:5b:64:a6:39:e7:21:e7:e0:c4:14:7d:af:
         73:7a:33:18:74:b6:0e:40:20:fb:61:07:7f:90:5c:7e:a3:d8:
         45:a3:c0:27:b8:a6:5a:67:22:1b:4c:e8:47:66:f3:90:e4:5a:
         3a:c2:9b:c4:62:46:33:b2:ac:25:3f:3e:0c:e2:31:64:5b:10:
         4c:e1:ea:63:03:63:10:a3:76:ea:78:3e:11:06:99:db:27:f9:
         1a:ff:e9:c0:e2:7f:f4:33:69:07:0d:39:66:59:a0:bc:5d:2d:
         46:27:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:30 2026 by rpki-client